Browse CVEs by Ecosystem and Severity
2,313 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2018-8266
ChakraCore RCE Vulnerability
HIGH
CVE-2018-8227
ChakraCore RCE Vulnerability
HIGH
CVE-2018-8243
ChakraCore RCE Vulnerability
HIGH
CVE-2018-8229
ChakraCore RCE Vulnerability
HIGH
CVE-2018-8177
ChakraCore RCE Vulnerability
HIGH
CVE-2018-8139
ChakraCore RCE Vulnerability
HIGH
CVE-2018-8130
ChakraCore RCE Vulnerability
HIGH
CVE-2018-8133
ChakraCore RCE Vulnerability
HIGH
CVE-2018-8137
ChakraCore RCE Vulnerability
HIGH
CVE-2018-1019
ChakraCore RCE Vulnerability
HIGH
CVE-2018-1022
ChakraCore RCE Vulnerability
HIGH
CVE-2018-1000073
RubyGems Link Following vulnerability
HIGH
CVE-2015-3649
open-uri-cached Gem for Ruby Unsafe Temporary File Creation Enables Code Execution
HIGH
CVE-2010-1615
Moodle vulnerable to SQL injection
HIGH
CVE-2017-1000026
mixlib-archive Path Traversal vulnerability
HIGH
CVE-2018-0875
.NET Core Denial of Service Vulnerability
HIGH
CVE-2015-5237
protobuf susceptible to buffer overflow
HIGH
CVE-2017-16932
Nokogiri gem, via libxml, is affected by DoS vulnerabilities
HIGH
CVE-2013-4593
omniauth-facebook Improper Authentication vulnerability
HIGH
CVE-2022-1473
Resource leakage when decoding certificates and keys
HIGH
CVE-2022-29970
sinatra does not validate expanded path matches
HIGH
CVE-2010-1153
TYPO3 PHP remote file inclusion vulnerability
HIGH
CVE-2010-0329
TYPO3 powermail Extension Vulnerable to SQL Injection via Unspecified Vectors
HIGH
CVE-2009-4803
Accessibility Glossary (a21glossary) SQL injection vulnerability
HIGH
CVE-2012-6685
Nokogiri is vulnerable to XML External Entity (XXE) attack
HIGH
CVE-2012-6135
RubyGems passenger gem allows remote attackers to delete files
HIGH
CVE-2022-26924
YARP Denial of Service Vulnerability
HIGH
CVE-2022-29498
SQL injection in blazer
HIGH
CVE-2022-26788
PowerShell Elevation of Privilege Vulnerability
HIGH
CVE-2017-11770
Improper Certificate Validation
HIGH
CVE-2022-24836
Nokogiri Inefficient Regular Expression Complexity
HIGH
CVE-2022-24785
Path Traversal: 'dir/../../filename' in moment.locale
HIGH
CVE-2022-24440
Command injection in cocoapods-downloader
HIGH
CVE-2022-21223
Command injection in cocoapods-downloader
HIGH
CVE-2022-24791
Use after free in Wasmtime
HIGH
CVE-2022-24789
Server side request forgery in C1 CMS
HIGH
CVE-2018-25032
Nokogiri affected by zlib's Out-of-bounds Write vulnerability
HIGH
CVE-2022-0759
Improper Certificate Validation in kubeclient
HIGH
CVE-2021-3589
Missing Authentication for Critical Function in Foreman Ansible
HIGH
CVE-2022-0778
openssl-src's infinite loop in `BN_mod_sqrt()` reachable when parsing certificates
HIGH
CVE-2022-24713
Rust's regex crate vulnerable to regular expression denial of service
HIGH
CVE-2024-22051
Integer overflow in cmark-gfm table parsing extension leads to heap memory corruption
HIGH
CVE-2022-24722
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in view_component
HIGH
CVE-2022-0609KEV
Use after free in Animation
HIGH
CVE-2022-23639
crossbeam-utils Unsoundness of AtomicCell<{i,u}64> arithmetics on 32-bit targets that support Atomic{I,U}64
HIGH
CVE-2022-23634
Puma used with Rails may lead to Information Exposure
HIGH
CVE-2022-23633
Exposure of information in Action Pack
HIGH
CVE-2020-11969
Missing Authentication for Critical Function in Apache TomEE
HIGH
CVE-2022-0524
Publify Business Logic Errors
HIGH
CVE-2022-23833EPSS 3.6%
Infinite Loop in Django